$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3449e550-a44f-37a2-bd44-c7b1e5520f1f.roa File: 3449e550-a44f-37a2-bd44-c7b1e5520f1f.roa (raw, json) Hash identifier: SFHDTmTYpnmPXN6WSpgSh0Ev9HB1CzH+MQ6UB8D29q4= Subject key identifier: 6D:AA:7E:7D:92:29:7F:2E:3D:82:E8:85:3D:AF:94:2F:D3:B1:E1:9C Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D100D04AC9B701E8754E8F378 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3449e550-a44f-37a2-bd44-c7b1e5520f1f.roa Signing time: Thu 05 Mar 2026 02:00:32 +0000 ROA not before: Thu 05 Mar 2026 02:00:32 +0000 ROA not after: Wed 03 Jun 2026 01:00:32 +0000 asID: 274170 IP address blocks: 38.255.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:10:0d:04:ac:9b:70:1e:87:54:e8:f3:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 5 02:00:32 2026 GMT Not After : Jun 3 01:00:32 2026 GMT Subject: CN=56cd2bf4-dfbb-4d74-b366-9dd26549fa30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:93:92:25:3a:7c:73:0e:a9:0b:70:d1:14:97: eb:17:6b:88:8a:8f:b1:b5:35:1f:2b:17:6d:24:4f: bc:d1:52:23:e4:87:81:21:a3:9b:dc:6e:a3:0d:83: 99:b8:4f:b3:99:b2:c1:0b:50:3d:f8:20:da:6d:ae: e7:ae:79:9f:b1:f0:46:8f:d1:06:f6:3a:e9:16:9c: 29:05:6b:18:c9:e1:94:a9:f7:44:77:3c:06:c1:83: 75:41:6c:96:b7:b0:b0:be:d4:71:83:4f:59:10:28: 25:0b:97:0c:b8:b0:7e:13:74:7c:fe:cc:26:67:a1: 96:ae:aa:38:cf:26:ea:76:43:ea:29:f2:38:7c:fe: e9:ff:c1:c9:80:01:1f:dd:90:65:01:a7:5e:a3:86: fc:be:3a:0e:68:8b:f2:a6:27:4a:7b:85:a7:f1:04: 00:70:59:fc:47:ce:8c:37:fc:8d:86:e0:7c:9c:90: 53:17:c7:1d:34:f0:97:c1:e5:b6:25:b9:72:6e:2b: a4:56:a5:2a:ae:01:6e:70:bb:10:ea:2a:b3:02:c6: db:ca:a5:15:1c:67:1d:a9:1b:79:7b:dd:4b:fa:c9: 46:54:8d:ab:cf:75:75:e9:e8:81:e9:e4:17:fa:aa: 37:3b:cf:f0:47:0e:b5:d4:bb:ad:97:b5:0f:e1:76: 2d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AA:7E:7D:92:29:7F:2E:3D:82:E8:85:3D:AF:94:2F:D3:B1:E1:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3449e550-a44f-37a2-bd44-c7b1e5520f1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.255.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:0d:92:98:f4:ac:30:4a:a1:e7:23:5f:c7:c6:f0:61:f1:23: 96:84:42:9c:2e:74:00:f6:35:55:5c:a6:3b:e3:62:b6:cc:fa: d7:59:f7:63:3f:d9:4e:98:ed:0a:49:41:ef:e3:b0:30:01:a6: 4e:cc:f7:4b:d4:81:d0:2d:70:00:d3:2d:bc:e3:af:d2:88:6e: c7:a4:59:74:e6:d9:96:0a:6e:3e:8f:e3:5d:f5:43:ae:d6:3a: 44:fa:cb:39:bc:3c:73:52:07:32:d4:c1:10:90:77:5a:a0:e4: e0:e3:16:44:3a:0f:74:41:99:87:2a:fa:8a:51:22:35:37:bf: ba:28:b9:1c:d2:59:ae:c3:7e:1e:6c:98:c7:3d:65:c0:e0:11: 4f:62:18:1c:54:5e:d1:6a:fa:05:e3:a9:b5:9e:1c:db:7c:d4: 2b:8f:67:4a:c4:14:c8:cb:1e:7f:62:87:16:d5:21:08:e1:59: 35:57:30:75:0c:b6:5b:0f:40:f6:5c:a8:a0:2a:8f:25:e4:09: f8:05:70:5d:34:74:a7:08:4a:b0:4d:56:4c:59:5e:a5:d7:17: d2:3f:6a:14:c4:ba:45:de:fe:83:bc:25:69:e9:6f:b9:a5:8f: 04:f3:b1:fc:14:58:24:c2:03:31:24:7b:ac:4a:68:ed:60:26: 9d:9b:ae:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0QDQSsm3Aeh1To83gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMwNTAyMDAzMloXDTI2MDYwMzAxMDAzMlowLzEtMCsGA1UEAxMk NTZjZDJiZjQtZGZiYi00ZDc0LWIzNjYtOWRkMjY1NDlmYTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5OSJTp8cw6pC3DRFJfrF2uIio+xtTUfKxdt JE+80VIj5IeBIaOb3G6jDYOZuE+zmbLBC1A9+CDaba7nrnmfsfBGj9EG9jrpFpwp BWsYyeGUqfdEdzwGwYN1QWyWt7CwvtRxg09ZECglC5cMuLB+E3R8/swmZ6GWrqo4 zybqdkPqKfI4fP7p/8HJgAEf3ZBlAadeo4b8vjoOaIvypidKe4Wn8QQAcFn8R86M N/yNhuB8nJBTF8cdNPCXweW2JblybiukVqUqrgFucLsQ6iqzAsbbyqUVHGcdqRt5 e91L+slGVI2rz3V16eiB6eQX+qo3O8/wRw611Lutl7UP4XYtlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2qfn2SKX8uPYLohT2vlC/TseGcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvMzQ0OWU1NTAtYTQ0Zi0z N2EyLWJkNDQtYzdiMWU1NTIwZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJv95MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGENkpj0rDBKoecjX8fG8GHxI5aEQpwudAD2NVVcpjvjYrbM+tdZ92M/ 2U6Y7QpJQe/jsDABpk7M90vUgdAtcADTLbzjr9KIbsekWXTm2ZYKbj6P4131Q67W OkT6yzm8PHNSBzLUwRCQd1qg5ODjFkQ6D3RBmYcq+opRIjU3v7oouRzSWa7Dfh5s mMc9ZcDgEU9iGBxUXtFq+gXjqbWeHNt81CuPZ0rEFMjLHn9ihxbVIQjhWTVXMHUM tlsPQPZcqKAqjyXkCfgFcF00dKcISrBNVkxZXqXXF9I/ahTEukXe/oO8JWnpb7ml jwTzsfwUWCTCAzEke6xKaO1gJp2brro= -----END CERTIFICATE-----Generated at Sat Mar 14 18:25:07 2026 by rpki-client